XWiki Platform Auth Bypass

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to manipulate the integrity, accessibility, and confidentiality of information...

Mozilla Firefox ESR Memory Use After Free

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

ROS-20260407-73-0034

A vulnerability in the fs/buffer.c component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an intruder to affect the integrity and availability of protected information...

AppleScript macOS Data Compromise

The vulnerability of AppleScript components in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

FreeRDP Persistent Cache Read Buffer Overflow

The vulnerability of the persistentcachereadentryv3 function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of protected information...

Linux net/ipv6/exthdrs_core ipv6_find_tlv Data Compromise

The vulnerability of the ipv6findtlv function in the net/ipv6/exthdrscore.c module of the Linux kernel involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Nextcloud Contacts Data Compromise

The vulnerability of the Nextcloud Contacts application, a cloud-based software for creating and using Nextcloud data storage, is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

Linux mlx5e_skb_fifo_pop() and mlx5e_ptphandle_ts_cqe

The vulnerabilities of the mlx5eskbfifopop and mlx5eptphandletscqe functions in the Linux operating system are related to the reutilization of previously released memory. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of...

CVE-2026-2273

CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of...

ROS-20260310-73-0011

A vulnerability in the Digital Credentials component of Google Chrome browser is related to incorrect restriction of visualized user interface layers. Exploitation of the vulnerability could allow an attacker acting remotely to affect the integrity of protected information...

Secret Net Studio Shadow Copying Resource Management

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to resource management errors. Exploiting this vulnerability could allow an attacker to influence the accessibility and integrity of the protected information...

Linux IOMMU Driver Heap Buffer Overflow DoS

The vulnerability of the dmarparseonerhsa function in the drivers/iommu/intel/dmar.c file of the Linux operating system’s IOMMU driver is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Vim Buffer Overflow

The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

Tenda F3 Data Compromise

The vulnerability in the web interface for managing microprogramming router software Tenda F3 is related to incorrect restrictions on the visible layers or frames of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...

HRBOX Cross-site Request Forgery

The vulnerability of the HRBOX business platform relates to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

tar-fs Package Data Compromise

The vulnerability of the tar-fs package from the tar-stream library relates to an incorrect pathname limitation for the restricted-access directory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

Fortinet FortiManager Authentication Bypass

The vulnerability of the Fortinet FortiManager device management software lies in the absence of authentication. Exploiting this vulnerability allows a malicious actor to influence the integrity of the protected information...

Mellanox Ethernet driver Heap Buffer Overflow DoS

The vulnerability of the mlx5einitreprx function in the drivers/net/ethernet/mellanox/mlx5/core/enrep.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise th...

SEV microprogramming software components

The vulnerability of the SEV microprogramming software for AMD graphics processors is related to improper prevention of bit modification of the lock bits. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

AMD graphics processor Privilege Escalation

The vulnerability of AMD’s microprogrammed graphics processor software is related to the improper isolation of common resources between trusted and untrusted agents. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...